Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D81FC29A554911F1BCA9C3FFCE1D38B0.roa
File: D81FC29A554911F1BCA9C3FFCE1D38B0.roa (raw, json)
Hash identifier: w435YCmoIJrb7VjC8gJMKWMf6LAF3/J/PdVU9BEAhAo=
Subject key identifier: D1:1F:4E:B4:27:7C:35:57:0E:B6:E3:C5:A5:98:96:6B:9A:0E:CC:14
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CDBF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D81FC29A554911F1BCA9C3FFCE1D38B0.roa
Signing time: Thu 21 May 2026 19:18:27 +0000
ROA not before: Thu 21 May 2026 19:18:23 +0000
ROA not after: Fri 26 Jun 2026 19:18:23 +0000
asID: 63139
IP address blocks: 154.94.86.0/24 maxlen: 24
154.94.87.0/24 maxlen: 24
154.94.88.0/24 maxlen: 24
154.94.89.0/24 maxlen: 24
154.94.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118207 (0x1cdbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 19:18:23 2026 GMT
Not After : Jun 26 19:18:23 2026 GMT
Subject: CN=6a0f5a83-63a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:e1:3d:b2:5c:6c:1d:f0:3e:02:0f:25:d7:
25:6c:86:a9:da:f0:13:81:50:a2:64:cd:45:90:65:
b2:fa:24:68:7a:93:10:a8:91:8f:d2:b0:68:c0:fe:
99:24:e5:3e:52:2a:5d:2d:1c:81:81:9e:21:fb:a5:
00:80:06:d1:cf:2a:6e:f2:69:2e:4d:18:8c:02:dc:
75:a9:41:b2:75:3d:30:23:71:e9:8e:42:24:fd:f0:
26:57:66:69:e5:d2:3f:02:d8:26:74:a1:46:10:7c:
74:8a:38:ae:15:af:a0:e8:e9:aa:9d:a0:6f:17:3d:
cf:f3:3c:6b:1d:77:01:2a:fc:50:9b:8f:2e:2d:70:
5b:af:b2:d5:99:72:2a:c8:ab:8b:be:07:49:db:8f:
5c:7c:fc:01:6e:bf:21:d0:af:e9:0f:29:8f:4b:9d:
97:d7:0a:b9:38:79:2f:70:3b:2e:c8:9a:d3:dc:e5:
43:45:73:0b:6b:8d:8e:d8:81:31:9b:59:05:34:c6:
73:c5:a2:68:70:97:03:ee:12:57:f7:80:12:07:10:
43:70:5b:be:d2:a7:db:9b:60:df:7f:10:b2:fc:be:
60:a7:f2:cc:a3:ed:d5:12:cb:72:6d:49:64:67:7c:
18:0a:fa:ec:ad:de:f9:f5:13:b7:2a:9a:69:92:60:
57:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:1F:4E:B4:27:7C:35:57:0E:B6:E3:C5:A5:98:96:6B:9A:0E:CC:14
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D81FC29A554911F1BCA9C3FFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.86.0-154.94.90.255
Signature Algorithm: sha256WithRSAEncryption
85:af:5a:16:df:8f:77:8f:89:7d:9a:8b:fb:d1:46:16:7c:b3:
c3:2c:2a:82:aa:e7:46:0e:8a:c9:1d:56:d8:d0:ef:a7:ca:39:
ac:bc:a4:63:65:d0:58:d3:fd:85:e4:a0:ae:fc:6b:25:79:7f:
5c:9c:16:8b:56:86:0a:b9:95:bd:d0:55:dd:6b:b9:c7:7d:36:
af:fe:60:12:eb:cc:0c:e1:1a:2a:e3:59:50:41:c3:ff:4e:45:
34:34:18:52:b5:18:c5:c2:3e:ac:06:2d:ef:ea:a5:ff:c3:ac:
9f:83:61:fc:aa:e5:dd:ca:f1:ac:9a:79:8a:e4:a8:69:4f:af:
bc:1b:ba:f3:dd:4f:51:ef:61:5c:93:a2:19:06:c6:43:cd:02:
ba:f0:67:54:13:8a:f8:58:cb:ae:33:fc:ab:0d:95:00:f9:96:
aa:c3:6b:c3:b9:b4:d6:37:22:ac:38:a5:a5:43:4c:bf:2d:83:
94:cd:b1:ba:b0:2a:fe:71:39:12:10:8a:56:ac:8e:0e:31:69:
aa:a3:7c:bd:1c:9a:7b:8a:4e:7a:d4:01:b7:74:e1:68:cb:35:
14:78:ac:32:8a:74:d4:46:e0:47:c0:cc:2d:13:c7:c8:29:e2:
2d:3e:fc:00:37:7c:12:7b:38:67:94:87:ab:b3:89:e9:6a:67:
8e:17:15:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:52 2026 by rpki-client